Skip to content

Session API: Use case-insensitive authentication like in UI

username-removed-19229 requested to merge (removed):fix-api-auth into master

Session API: Use case-insensitive authentication like in UI

Make the Session API (e.g. used by GitLab CI for user login) behave like the GitLab UI by matching username and email of the login user case-insensitive.

This API (POST /session) is used by external applications like GitLab CI also for interactive user login, so case-typos in email and username credentials should be handled like in the GitLab UI.

The changed file lib/gitlab/auth.rb is only used by this API.

Merge request reports